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IN THE CLAIMS: 

Please cancel claims 1-28 without prejudice or disclaimer, and substitute new 
claims 29-56 therefor as follows: 
Claims 1-28 (Cancelled). 

29. (New) A method of arranging communication between an administrator 
device and an administered device in a network, comprising the steps of: 

arranging said communication in the form of a chain of digitally signed 
communication items including messages sent from an originator device to a recipient 
device, each said message having associated a respective digitally signed receipt; and 

configuring said originator device not to send a new item toward said 
recipient device in the absence of a respective digitally signed receipt for a previously 
sent item. 

30. (New) The method of claim 29, comprising the steps of: 

detecting at said originator device a respective digitally signed receipt item 
from said recipient device having failed to reach the originator device within a given time 
span after a message item has been issued by said originator device; and 

asking said recipient device for a signed statement indicating at least one 
of a last message item received and a last message item sent by said recipient device. 

31 . (New) The method of claim 29, comprising the step of storing with at least 
one of said administrator devices and said administered devices, a history record of 
communication items exchanged therebetween, said history record being agreed upon 
and signed by both said administrator device and said administered device. 
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32. (New) The method of claim 29, comprising the step of carrying out at said 
originator device a session closing step mentioning at least one of a last message item 
received and a last message item sent by said recipient device. 

33. (New) The method of claim 29, comprising the step of keeping with said 
originator device an indication of an on-going communication session as a pending 
session until a signed receipt item is received from said recipient device. 

34. (New) The method of claim 29, comprising the step of inserting in said 
communication items, payload data and administrative commands accompanied by 
respective digital signatures. 

35. (New) The method of claim 29, comprising the step of causing said 
recipient device to verify digital signatures for validity. 

36. (New) The method of claim 29, comprising the step of creating digital 
signatures under the full control of the device issuing such signatures. 

37. (New) The method of claim 29, comprising the step of associating secure 
digital signature evidence with said digitally signed messages and receipts. 

38. (New) The method of claim 37, wherein said secure digital signature 
evidence is in the form of RSA class digital signatures. 

39. (New) The method of claim 29, comprising the steps of arranging 
communication between a set of administrator devices and a given administered device 
and permitting at least one administrator device in said set to hide its identity to said 
administered device. 
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40. (New) The method of claim 39, comprising the step of hiding the identity 
of said at least one administrator device to said administered device by using at least 
one of group signatures or pseudonym digital certificates. 

41 . (New) The method of claim 39, comprising the step of resuming a session 
interrupted in the absence of a receipt provided by said at least one administrator hiding 
its identity to a message sent by said given administered device, wherein said session 
is resumed by said at least one administrator hiding its identity. 

42. (New) A system of an administrator device and an administered device in 
a network, said administrator device and administered device being configured for 
communication in the form of a chain of digitally signed communication items including 
messages sent from an originator device to a recipient device, each said message 
having associated a respective digitally signed receipt, and wherein said originator 
device is configured not to send a new item toward said recipient device in the absence 
of a respective digitally signed receipt for a previously sent item. 

43. (New) The system of claim 42, wherein: 

said originator device is configured for detecting a respective digitally 
signed receipt item from said recipient device having failed to reach the originator 
device within a given time span after a message item has been issued by said originator 
device; and 

asking said recipient device for a signed statement indicating at least one 
of a last message item received and a last message item sent by said recipient device. 
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44. (New) The system of claim 42, comprising, data items stored with at least 
one of said administrator device and said administered device, and comprising a history 
record of communication items exchanged therebetween, said history record being 
agreed upon and signed by both said administrator device and said administered 
device. 

45. (New) The system of claim 42, wherein said originator device is 
configured for carrying out a session closing step mentioning at least one of a last 
message item received and a last message item sent by said recipient device. 

46. (New) The system of claim 42, wherein said originator device is 
configured for keeping an indication of an on-going communication session as a 
pending session until a signed receipt item is received from said recipient device. 

47. (New) The system of claim 42, wherein said originator device is 
configured for inserting in said communication items payload data and administrative 
commands accompanied by respective digital signatures. 

48. (New) The system of claim 42, wherein said recipient device is configured 
for verifying said digital signatures for validity. 

49. (New) The system of claim 42, comprising means for creating said digital 
signatures, said means being assigned acting under the full control of the device issuing 
such signatures. 

50. (New) The system of claim 42, wherein there is a configuration for 
associating secure digital signature evidence with said digitally signed messages and 
receipts. 
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51 . (New) The system of claim 50, wherein said secure digital signature 
evidence is in the form of RSA class digital signatures. 

52. (New) The system of claim 42, comprising a set of administrator devices 
and a given administered device, wherein at least one administrator device in said set is 
configured to hide its identity to said administered device. 

53. (New) The system of claim 52, wherein said at least one administrator 
device is configured for hiding its identity to said administered device by using at least 
one of group signatures or pseudonym digital certificates. 

54. (New) The system of claim 52, wherein said at least one administrator 
hiding its identity is configured for resuming a session interrupted in the absence of a 
receipt provided by said at least one administrator hiding its identity to a message sent 
by said given administered device. 

55. (New) A communication network comprising a system according to any 
one of claims 42-54. 

56. (New) A computer program product, loadable in the memory of at least 
one computer, and comprising software code portions capable of performing the steps 
of the method of any one of claims 29-41 . 
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